Ukuxhawulana kwe-WireGuard kuyasebenza, insiza ayisebenzi

Ukuxhawulana kuqedwa, iklayenti likhombisa isibali sokusakaza sakamuva, kodwa isicelo esiya ensizeni kuseva efanayo siyahluleka. Le nhlanganisela iyadida abantu, ngoba umhubhe uyasebenza ngokusobala. Okungakafakazelwa ukulethwa kwendawo: iphakethe lafika kusibungu, futhi isibungu kusamele lamukele kusokhethi efanele bese lidlulisela kunqubo enelungelo lokuphendula. Hlola lezi zindawo ezintathu zokuhlola ngokulandelana.

Ma kuleso sokuqala esingasebenzi, futhi ungangezi imithetho kweminye.

Ukuxhawulana kufakazela umhubhe kuphela

Ukuxhawulana kwe-WireGuard kwakha okhiye phakathi kontanga futhi kugunyaza ukuhamba kwedatha ezikhaleni okuyizona ezibaliswe yintanga ngayinye. Akusho lutho mayelana nokuthi yiziphi izinqubo ezilalelayo kuseva, futhi akusho nokuthi ingabe ucango lomlilo lwasibungu luyawamukela yini amaphakethe aqondiswe kwelinye lamakheli ayo.

Yilo mehluko wokugcina ovame ukushiywa: ukuhamba kwedatha okuya kusibungu uqobo kungukufaka kwendawo, kuyilapho ukuhamba kwedatha okudlula kusibungu kuye kwenye indawo kuwukudlulisela. Kubhekwa amaketanga ocango lomlilo ahlukene kanye nezilungiselelo ezihlukene. Ukuhlola iketanga elingalungile kuchitha intambama futhi kubuyisa izibali ezibonakala zingenacala.

Funda isilaleli nomzila

Kuklayenti, qinisekisa ukuthi ikheli lomhubhe leseva lihamba lingene emhubheni. Kuseva, qinisekisa ukuthi isokhethi ikhona ekhelini elisetshenziswa iklayenti, nokuthi inqubo engemuva iyona obekuhlosiwe.

wg show
ip route get 10.66.0.1
ss -lntup | grep -E ':80|:443'
nft list ruleset | grep -A6 'chain input'
curl -vk --max-time 5 https://10.66.0.1/

Isilaleli esiku-127.0.0.1 asisoze siphendule isicelo esiqondiswe ku-10.66.0.1, noma ngabe ucango lomlilo luvumela ini. Isilaleli esikweliheli jikelele sizophendula, ngaphandle uma umthetho usivimbela. Ngakho uhlu lwamasokhethi luxazulula uhhafu wezimo ngaphambi kokuba kubhekwe noma yimuphi umthetho. Iphothi nekheli ndawonye zinengqumo yokuthi isicelo singafika yini.

Qhathanisa ikheli elisetshenziswa iklayenti nekheli iseva enalo ngempela kusixhumi somhubhe. Isilungiselelo esidala kunoma yiluphi uhlangothi siveza isicelo esiqondiswa ngendlela efanele siya kontanga ongenalo lelo kheli.

Sebenzisa imithetho yokufaka kwendawo, hhayi yokudlulisela

Uma iphakethe lifika futhi isokhethi ikhona, umngcele osele ingumgomo wokufaka. Umthetho ovumela ukudlulisela awuvumeli ukulethwa kwendawo, futhi umthetho okhawulelwe kusixhumi esisodwa kungenzeka ungahambisani negama lesixhumi somhubhe olindele.

Hlola ngephothi elilodwa elivunyelwe eliya ensizeni ehlosiwe esikhundleni sokuvula isibungu. Bese uhlola ukugunyazwa kwesicelo ngokwaso: uhlu oluvunyelwe, imfuneko ye-akhawunti noma ukubopha egameni elithile lesibungu kungase kwale isicelo inethiwekhi elilethe ngempumelelo.

Shiya ukuhlolwa kwesitifiketi endaweni. Ubunikazi besitifiketi obungalindelekile kuwulwazi lwakho ukuthi yisiphi isibungu esiphendulile, hhayi isithiyo okufanele sidlulwe. Ukuchofoza ngapho kufihla umkhondo oyedwa okhomba insiza engalungile.

Wehlukanise ukwehluleka kwegama, kosayizi nobunikazi

Insiza esebenza ngekheli kodwa ehluleka ngegama iyinkinga ye-DNS, futhi ukulungisa kukusilungiselelo somxazululi esithunyelwa kuklayenti, hhayi kucango lomlilo. Insiza ephendula izicelo ezincane kodwa ema kakhulu kuzimpendulo ezinkulu ikhomba usayizi wephakethe ne-MTU, okuwuphenyo oluhluke ngokuphelele.

Iphutha le-HTTPS elisho isibungu esingalungile ngokuvamile lisho ukuthi isicelo safika kwensiza enye, kaningi ngoba iphroksi noma esinye isilaleli sinayo leyo phothi. Funda isihloko sesitifiketi bese usiqhathanisa nesibungu obufuna ukusifinyelela. Lokho kuqhathanisa akubizi lutho futhi kuvame ukuqeda uphenyo.

Bhala ukuthi yisiphi isigaba sokuhlola esihlulekile: isokhethi, umthetho wokufaka noma umgomo wesicelo. Lowo mugqa owodwa wehlukanisa ukungasebenzi kwenethiwekhi nesinqumo sokugunyaza. Futhi uvimbela umuntu olandelayo ekuvuleni amaphothi ayengakaze abe yinkinga.